root@z2r:~/blog/category/writeups/page/4#ls -la

<CTF Writeups />

Walkthroughs of CTF challenges from HackTheBox, TryHackMe, and more

> grep -i
CTF WRITEUPSPWN

HTB - Words from the Past

HackTheBoxMedium

Words from the Past is a x86_64 Linux pwn challenge centered around constrained 5-byte micro-shellcode execution across a two-stage state machine. The binary implements multiple layers of anti-analysis and anti-debugging protections, including timing anomaly detection (rdtsc), library preloading detection, ptrace detection (/proc/self/status parsing), and execution inside a forked child process. The crux of the challenge relies on mastering x86_64 32-bit relative branching (call rel32 and jmp rel32), Linux memory allocation behavior (mmap hints with and without MAP_FIXED), register state manipulation, and overcoming lightweight 3-bit Process ID (PID) entropy (pid & 7) to redirect control flow to a glibc one_gadget.

July 30, 202611 min read
[< Prev][Next >]